General
-
Target
DriversCloud_Win (1).exe
-
Size
401KB
-
Sample
230331-wa9k2ade2z
-
MD5
cb7e8b7b7fabe00a2f29a92720b8317e
-
SHA1
87a4aef2a9f882b64cf01e66ff1714340f78d500
-
SHA256
f13995db4175e5dbea232776fbbb6758bfed8fe0ba70eaf390b6008a453af7c4
-
SHA512
85f92959d59a94dc5df1a10805337348a08b39c34ab65fbb04dda40a8ce9818b0b15838af380509e310b9e72589acc9f8af12a6013824ea1eb9d3c72f3cbae06
-
SSDEEP
6144:egORaDUgROThd4y62ucdOr+9Jb+Nhqnu2Y3klAv6bz58WNa33K:egHHRSd4zLuOqJb+N6Y3AAv6h8W63K
Static task
static1
Behavioral task
behavioral1
Sample
DriversCloud_Win (1).exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
DriversCloud_Win (1).exe
-
Size
401KB
-
MD5
cb7e8b7b7fabe00a2f29a92720b8317e
-
SHA1
87a4aef2a9f882b64cf01e66ff1714340f78d500
-
SHA256
f13995db4175e5dbea232776fbbb6758bfed8fe0ba70eaf390b6008a453af7c4
-
SHA512
85f92959d59a94dc5df1a10805337348a08b39c34ab65fbb04dda40a8ce9818b0b15838af380509e310b9e72589acc9f8af12a6013824ea1eb9d3c72f3cbae06
-
SSDEEP
6144:egORaDUgROThd4y62ucdOr+9Jb+Nhqnu2Y3klAv6bz58WNa33K:egHHRSd4zLuOqJb+N6Y3AAv6h8W63K
Score8/10-
Downloads MZ/PE file
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-